CVE-2006-4914

CVE-2006-4914 describes a directory traversal vulnerability in A.l-Pifou 1.8p2. An attacker can read arbitrary files by manipulating the ze_langue_02 cookie via the choix_lng parameter to choix_langue.php, which indirectly sets the cookie and allows triggering an inclusion from inc/change_lang_ck...